<ul><li>A vulnerability in iOS and macOS allowed unauthorized access to sensitive user data without user consent or notification.</li><li>The vulnerability exploited a flaw in Apple's TCC framework, allowing malicious apps to bypass data protections.</li><li>The vulnerability involved a symlink attack, enabling attackers to redirect file operations and access sensitive files stored in iCloud undetected.</li><li>Apple addressed the vulnerability in iOS 18 and macOS 15 by reinforcing symlink checks and strengthening the TCC framework.</li></ul>

Now-patched macOS and iOS vulnerability allowed undetected access by bypassing data protections

Discover more